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Top Stories 

• The security breach at credit card processing company Global Payments likely existed for 
well over a year, compromising a little less than 1.5 million card numbers, according to 
new reports. - H Security (See item 8) 

• Twenty-five communities in eastern Washington’s Columbia River basin could have their 
municipal wells go dry within a decade, according to a study of the underground aquifer 
that supplies their groundwater. - Associated Press (See item 24) 

• A Minnesota man with suspected ties to white supremacist groups planned to attack the 
Mexican consulate in St. Paul, to stir debate on immigration amnesty issues ahead of the 
2012 Presidential election. - Associated Press (See item 27) 

• Chinese company ZTE, the world’s fourth-largest handset vendor, said one of its mobile 
phone models sold in the United States contains a vulnerability researchers said could 
allow others to control the device. - Reuters (See item 31) 

• More firefighters are heading to a fire that burned across more than 1 1 square miles in 
northern Colorado and is approaching a reservoir for the city of Greeley. - Associated 
Press; CBS News (See item 39) 
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Energy Sector 



Current Electricity Sector Threat Alert Levels: Physical: LOW, Cyber: LOW 

Scale: LOW, GUARDED, E L EVATED, HIGH, SEVERE [Source: ISAC for the Electricity Sector (ES-ISAC) - 
[http://www.esisac.coml 



1. May 17, KR1B 1490 Mason City - (Iowa) Investigators still looking for cause of 
explosion at Mason City plant. A Mason City, Iowa biodiesel plant will remain closed 
for now after an explosion May 15, KRIB 1490 Mason City reported May 17. The blast 
at Soy Energy caused some damage. The company’s president and general manager 
said they are still investigating the exact cause, but they do know it originated in a tank 
inside a restricted area. The president said they called together a team of experts to 
investigate what may have caused the incident, and they are working proactively with 
local officials and the fire department to determine the cause. He said after the 
investigation is complete and the tank is repaired, the plant should be back up and 
running. Soy Energy, which employs 40 people, produces biodiesel from soybeans and 
com stillage. 

Source: http://www.radioiowa.com/2012/05/17/investigators-still-looking-for-cause-of- 
explosion-at-mason-city-plant/ 

For another story, see item 36 
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Chemical Industry Sector 

2. May 18, WorkersCompensation.com - (Illinois) OSHA cites after worker dies from 
chemical burns. The U.S. Occupational Safety and Health Administration (OSHA) 
fined Raani Corp. $473,000 for failing to seek emergency medical treatment after a 
worker suffered chemical burns at the Bedford Park, Illinois manufacturing plant 
November 17, 2011. He died a few weeks later. The company, which makes health- 
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care items, over-the-counter pharmaceuticals, and household and salon products was 
cited with 14 violations, including 6 willful violations. OSHA was notified by the Cook 
County medical examiner that the worker died from burn injuries caused by high- 
temperature water and a solution that erupted while he was beneath an open tank hatch. 
An investigation found the firm failed to call 9-1-1 to seek emergency medical 
treatment and neglected to wash the worker in the available safety shower. The worker 
was transferred to a local occupational health clinic in a co-worker’s vehicle more than 
30 minutes after the injury. Six willful violations were cited for failing to: use available 
emergency care; provide, require and train workers on the proper use of protective 
clothing; provide eye, face, and hand protection when handling high-temperature liquid 
and hazardous chemicals; and provide hazard communication training to workers 
exposed to hazardous chemicals. The OSHA also issued seven serious safety violations. 
Due to the willful nature of some violations, the OSHA placed Raani in its Severe 
Violator Enforcement Program, which mandates targeted follow-up inspections to 
ensure compliance. 

Source: http://www.workerscompensation.com/compnewsnetwork/news/14380-osha- 
raani.html 



3. May 18, Detroit News - (Michigan) Accidental blaze guts Ferndale business. An 
accidental fire sparked by heated animal fat gutted an industrial facility in Ferndale, 
Michigan, May 17, causing an estimated $1 million in damage. Firefighters spent hours 
battling flames, which shot through the roof of Van Industries, a Ferndale police 
detective lieutenant said. The fire was believed to have started in an area where an 
employee was heating animal fat in a multi-gallon drum to liquefy it, said the Ferndale 
fire marshal. The facility, used for more than 30 years, makes rubbing compounds. 
When the employee went to a lab, the fat boiled over; burners beneath the drum ignited 
the vapor, the fire marshal said. The worker tried to extinguish the fire, but it quickly 
spread, he said. Firefighters worked quickly to contain the fire because a nearby 
building contained chemicals. The main goal was to contain the fire to that building as 
it is part of a “significant industrial park,” said the Ferndale city manager. Employees 
were evacuated, but no nearby businesses were cleared. 

Source: 

http://www.detroitnews.com/article/20120518/METRQ02/205180368/1409/metro/Acci 

dental-blaze-guts-Femdale-business 

4. May 18, Salem News - (Massachusetts) Bostik will pay $600K in fines for 
explosion. Bostik Inc. paid $600,000 in fines levied for a massive explosion at its 
Middleton, Massachusetts chemical plant that rocked the North Shore in 201 1. The fine 
was reduced by about a third from the $917,000 the U.S. Department of Fabor issued 
against the adhesives firm last September for 50 violations of workplace safety 
standards following the March 13, 2011, explosion. The Occupational Safety and 
Health Administration (OSHA) announced the settlement May 17. The fine reduction is 
not unusual to prevent a lengthy litigation process and “reflects in part the employer’s 
willingness to put in resources to correct the issues,” said a Fabor Department 
spokesman. The biggest change is Bostik will no longer use the direct solvation process 
under way at the time of the explosion. The blast occurred when a valve was left open, 
resulting in the release of flammable acetone vapors that ignited. Four workers were 
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hurt. A 6-month OSHA investigation concluded that the most severe of Bostik’s 
violations were the “serious deficiencies” in the company’s process safety management 
program. Since then, Bostik has taken “corrective action to address deficiencies in its 
PSM program and enhance the program’s effectiveness,” according to a statement 
released by the Labor Department. 

Source: http://www.salemnews.com/local/xl968162426/Bostik-will-pay-600K-in- 
fines-for-explosion 

5. May 17, Jersey Journal - (New Jersey; National) Union City man tracked down in 
Michigan arraigned on fraud charges, agrees to remain in custody. A Union City, 
New Jersey man was indicted on charges he bought more than $45,000 in pesticides 
and pesticide equipment using stolen credit and debit card numbers, the Jersey Journal 
reported May 17. He and his co-conspirators obtained credit and debit card numbers by 
calling people in Michigan and posing as local utility company employees, according to 
the indictment filed November 1 1 . They used the stolen numbers to buy pesticides and 
pesticide applicators from wholesalers outside New Jersey and had the merchandise 
shipped to locations including the defendant’s home, the indictment says. He is charged 
with one count of conspiracy to commit credit card fraud, 15 counts of access device 
fraud, and two counts of aggravated identity theft, officials said. After missing his 
December 2011 arraignment, he was arrested April 9 in Detroit after authorities got a 
tip, a spokesman for the U.S. attorney’s office said. 

Source: 

http://www.ni.com/hudson/index.ssf/2012/05/union city man on lam for frau.html 

For more stories, see items 20 and 21 
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Nuclear Reactors, Materials and Waste Sector 

Nothing to report 



T Return to top i 

Critical Manufacturing Sector 

6. May 17, USA Today - (National) 52,000 Acuras recalled for steering loss, fire 
risks. Acura announced the recall of 52,615 TL sedans from the 2007-08 model years 
because of a faulty power steering hose, USA Today reported May 17. In the affected 
vehicles, the hose may deteriorate over time and leak fluid. That could lead to a loss of 
steering control. If power-steering fluid leaks onto the catalytic converter, it could start 
a fire. The recall will begin in June, and dealers will replace the hose. 

Source: http://content.usatodav.com/communities/driveon/post/2012/05/5200Q-acuras- 
recalled-for-steering-loss-fire-risks/l#.T7ZiKlIvDzD 

[ Return to top ] 
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Defense Industrial Base Sector 



7. May 18, Newport News Daily Press - (National) F-22 backup oxygen system 
upgrade not complete until mid-2014. It will take about 2 years to finish upgrading 
the F-22 Raptor fleet with an automatic backup oxygen supply ordered by the U.S. 
Defense Secretary as a hedge against pilots feeling dizzy or disoriented, the Air Force 
said May 17. The week of May 14, the Secretary said he wanted to expedite installation 
of a backup oxygen supply to counter incidents of hypoxia in the jet. The Air Force 
logged 11 instances of hypoxia since September 2011 that have no discernible cause. 
Investigators leading a broad task force say it likely stems from either a lack of oxygen 
in the cockpit or tainted air emanating from an advanced oxygen-generating system. 
They are also looking into other areas of the aircraft, plus the pilots involved in the 
incidents. The problem has been ongoing — it forced a temporary grounding of the 
fleet in 2011. Before the Air Force begins installing a backup oxygen system, it must be 
qualified and flight-tested. That is expected to finish in November, said a statement 
issued May 17. The first Raptor will be retro-fitted with the new system in December. 
Starting in January 2013, the Air Force expects to retrofit 10 Raptors per month, using 
military personnel and civilian contractors. The fleet upgrade will be completed in June 
2014. There will be a second phase, but the Air Force is still working out details, the 
statement said. The new system, known as an A-BOS, or Auto Back-Up Oxygen 
System, will automatically activate in the event of rapid decompression or a shutdown 
of the environmental control system. 

Source: http://www.dailypress.com/news/militarv/dp-nws-raptor-changes- 
201205 18,0,6806704.story 

T Return to topi 

Banking and Finance Sector 

8. May 18, H Security - (National) Global Payments breach reportedly worse than 
expected. The security breach at credit card processing company Global Payments 
extends back further than was previously believed, H Security reported May 18. 
According to BanklnfoSecurity, the incident is now thought to go back as far as 
January 2011 — it was originally believed to have taken place between January 21 and 
February 25, 2012, but was later dated to early June 2011. While initial reports of the 
breach suggested more than 10 million accounts were compromised, Global Payments 
later said fewer than 1 .5 million card numbers were taken. 

Source: http://www.h-online.com/securitv/news/item/Global-Payments-breach- 
reportedly-worse-than-expected-1578956.html 

9. May 18, Associated Press - (Louisiana; Ohio) Plaquemines woman booked in 
counterfeit operation. The Plaquemines Parish Sheriffs Office in Louisiana arrested a 
woman May 16, saying she was involved in a counterfeiting operation involving a 
couple million dollars in counterfeit money orders and cashier’s checks. She was 
arrested after Plaquemines Parish detectives, along with other agencies, staged a 
delivery of counterfeit materials to her home that she accepted. Plaquemines Parish 
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deputies said DHS intercepted an international package that included $83,380 in 
counterfeit money orders and cashier’s checks in Ohio May 13. Deputies said the 
package was to be delivered to the woman. 

Source: 

http://www.dailvcomet.com/article/201205 18/APN/12051 80592?Title=Plaquemines- 
woman-booked-in-counterfeit-operation 

10. May 17, U.S. Department of the Treasury - (International) Treasury imposes 
sanctions on individuals linked to the Taliban and Haqqani Network. The U.S. 
Department of the Treasury’s Office of Foreign Assets Control (OFAC) May 17 
designated two individuals pursuant to Executive Order (E.O.) 13224. A Haqqani 
Network communications official was designated for acting for, or on behalf of, a 
Haqqani Network commander and a Taliban financier was designated for providing 
financial support for, and or financial services to, the Taliban. The Haqqani Network 
commander was previously designated by the U.S. Department of State in May 2011 
under E.O. 13224. The United States listed the Taliban as a Specially Designated 
Global Terrorist entity in July 2002. As a result of the May 17 actions, all property in 
the United States or in the possession or control of U.S. persons in which the two 
designated men have an interest is blocked, and U.S. persons are prohibited from 
engaging in transactions with them. 

Source: http://www.treasury.gov/press-center/press-releases/Pages/tgl584.aspx 

11. May 17, Idaho Statesman - (Idaho) Credit card scam hits Boise. Two men were 
charged with felony burglary after police in Boise, Idaho, said they caught the men 
May 16 with dozens of fake credit cards and hundreds of dollars worth of clothes and 
other items they bought with those cards. Boise police began their investigation of the 
men after officers working on an unrelated case saw them leave a store in the Boise 
Towne Square mall area with multiple bags and items that did not seem to match what 
men their age would buy. Officers quickly figured out the men appeared to be using 
fake credit cards. Police warned employees at another store right before the men tried 
to use the fake cards again, a crime prevention unit supervisor for the Boise police said. 
Officers pulled the pair over moments later and found dozens of cards in their car. 
Police said the men, both from southern California, appear to have been in the Boise 
area since May 14. Police said the scam involves identity theft, stolen credit card 
numbers, and fake IDs. 

Source: http://www.idahostatesman.com/20 1 2/05/ 17/21 20944/boise-police-two- 
califomia-men.html 



12. May 17, Reuters - (Washington, D.C.) Ex-U.S. Army Corps manager and son plead 
guilty to bribery scheme. A former program manager for the U.S. Army Corps of 
Engineers and his son pleaded guilty May 17 to participating in a plot involving 
possibly more than $30 million in bribes and kickbacks to steer a government contract 
to a favored bidder. The defendant, whom U.S. prosecutors call the ringleader of the 
scheme, said he was guilty of federal charges of bribery and conspiracy to commit 
money laundering. His son also pleaded guilty to one count of simple conspiracy for 
assisting his father for a period of time, according to the attorney who represented both 
men. The plea, which requires the defendant cooperate with the prosecutors, could also 
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help the government as it continues to investigate what it has called one of most brazen 
corruption schemes in federal contracting history. Prosecutors have said that beginning 
in 2006 the defendant, along with another former Army Corps program manager, 
agreed to direct government contracts to companies that paid them bribes, mostly 
through inflated invoices. Several men leading contractor and subcontractor companies 
have already pleaded guilty. 

Source: http://articles.chicagotribune.com/2012-05-17/news/sns-rt-us-usa-bribe- 
khanbre84gljr-20120517 1 bribery-scheme-program-manager-conspiracy-charge 

13. May 17, Reuters - (Washington) Fraud charges for former financial advisory 

chief. A federal grand jury indicted a former chairman of a national financial planning 
association with fraud May 17 for funneling more than $46 million of his clients’ 
money into risky ventures he co-founded. A former chairman of the National 
Association of Personal Financial Advisors (NAPFA) diverted the funds, which clients 
expected to be invested in publicly traded instruments, into his technology ventures 
instead, the U.S. Department of Justice said. The U.S. Securities and Exchange 
Commission (SEC) also announced parallel civil charges. The alleged fraud began in 
2003 and continued through 2011, the SEC said. The man and his advisory firm, The 
Spangler Group (TSG), diverted funds from several private investment funds he 
managed into two cash-poor technology companies, prosecutors said. The two 
companies in turn paid TSG “financial and operational support” fees of $830,000, 
essentially from customer funds. One firm went bankrupt, after receiving nearly $42 
million from the investment funds, the SEC said. He only disclosed the relationship in 
2011, when he placed TSG and the funds he managed into state court receivership. He 
faces 23 criminal counts including fraud and money laundering. 

Source: http://www.reuters.com/article/2012/Q5/17/us-sec-spangler- 
idUSBRE84G 1 GQ20 120517 



For more stories, see items 5 and 32 
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Transportation Sector 

14. May 18, Associated Press - (Mississippi) 1 arrested in Miss, highway 

shootings. Police arrested a suspect in two fatal highway shootings in Mississippi that 
prompted warnings a fake officer might be pulling over victims. Authorities said early 
May 18 that the fears of an impostor turned out to be unfounded. A Mississippi 
Department of Public Safety spokesman said that the suspect had not been posing as a 
police officer in the shootings. The man was held in jail on charges of kidnapping, 
aggravated assault, and rape, and will also be formally charged with two counts of 
capital murder. A man was found dead in his car on Interstate 55 in Panola County May 
8, and a woman was found dead near her car on Mississippi Highway 713 in nearby 
Tunica County May 11. 

Source: 

http://www.boston.com/news/nation/articles/2012/05/18/suspect arrested in deadly m 
iss highway shootings/ 
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15. May 17, Contra Costa Times - (California) Westbound 1-580 in Castro Valley 
cleared after gravel spill. All lanes of westbound Interstate 580 near Eden Canyon 
Road in Castro Valley, California, have reopened after a late afternoon gravel spill, but 
traffic remained heavy through the area, the California Highway Patrol reported May 
17. The spill, which occurred May 17, spread decomposed granite across the three right 
lanes of the roadway, forcing it to close for a little more than 3 hours. 

Source: http://www.mercurynews.com/breaking-news/ci 206491 17/gravel- spill- 
blocking-lanes-westbound-i-580-castro 

16. May 16, United States Department of Justice - (Florida) Orlando man pleads guilty 
to aiming a laser at airliners departing from Orlando International Airport. A 
U.S. attorney announced that a man pleaded guilty May 16 to aiming the beam of a 
laser pointer at an aircraft departing Orlando International Airport in Orlando, Florida. 
He faces a maximum penalty of 5 years in federal prison. According to court 
documents, from about January until March 23, on at least 23 occasions, he aimed the 
beam of a laser at passenger aircraft departing. In the charging document, it is alleged 
the aiming of the laser at the departing aircraft caused pilots to take evasive maneuvers 
during takeoff, and placed the aircraft in danger during a critical time in flight. The 
Federal Aviation Administration Modernization and Reform Act of 2012, establishes a 
new criminal offense for aiming the beam of a laser pointer at an aircraft in the special 
aircraft jurisdiction of the United States, or at the flight path of such an aircraft. The 
statute was enacted in response to a growing number of incidents of pilots being 
distracted or even temporarily blinded by laser beams. 

Source: http://www.justice.gov/usao/flm/press/2012/may/20120516 Hansen.html 

For more stories, see items 36 and 42 



T Return to topi 

Postal and Shipping Sector 

Nothing to report 



T Return to top] 

Agriculture and Food Sector 

17. May 18, CBC News - (International) Virus sparks quarantine on B.C. salmon 
farm. British Columbia’s salmon farming industry is on high alert after the discovery 
of a lethal fish virus at one farm on the west coast of Vancouver Island, CBC News 
reported May 18. The Canadian Food Inspection Agency has quarantined the farm at 
Dixon Bay, north of Tofino. Mainstream Canada, which runs the operation, said it 
would destroy its entire stock of 560,000 salmon to prevent the disease from spreading. 
The company said Infectious Hematopoietic Necrosis (IHN) was detected during 
routine testing May 14. “So we are just going to depopulate,” Mainstream’s 
spokesperson said, adding, “we will lose money. It’s in the millions.” A fish pathologist 
for the B.C. Ministry of Agriculture concluded the farmed fish were infected by wild 
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salmon which carry IHN, but have developed resistance to the virus. He said IHN is 
present in most wild salmon consumed at the dinner table, but is harmless to humans. It 
is deadly, however, to Atlantic salmon raised in open-net pens in the Pacific Ocean. 
Source: http://www.cbc.ca/news/technologv/story/2012/05/17/bc-salmon-farm- 
quarantined-lethal-virus.html 

18. May 17, msnbc.com - (National) Salmonella-linked sushi toll climbs to 316 in 26 
States. The toll from the latest outbreak of Salmonella-spiked sushi has climbed to 316, 
according to a case count update released May 17 by the Centers for Disease Control 
and Prevention (CDC). Tainted tuna scraped from the backbone of the fish has been 
implicated in the outbreak that has sickened hundreds across 26 States and Washington, 
D.C. So far, 304 people have been diagnosed with the rare Salmonella Bareilly strain, 
while another 12 have become ill with Salmonella Nchanga, the CDC reported. In all, 
37 people have been hospitalized. The number may be an underestimate, since food 
safety officials estimate that for every Salmonella infection they hear about, 29.3 go 
unreported. Using that multiplier, the total number of tuna-sickened Americans may be 
closer to 9,575. Moreover, illnesses that occurred after April 17 might not have been 
recorded yet because of the lag between when people get sick and when they report to 
health officials. 

Source: http://vitals.msnbc.msn.com/ news/2012/05/17/11748628-salmonella-linked- 
sushi-toll-climbs-to-316-in-26-states?lite 



19. May 17, Associated Press - (South Carolina) DHEC releases name of restaurant in E 
coli probe. South Carolina State health officials have released the name of a 
Spartanburg restaurant connected to a recent E coli outbreak after the business agreed 
to be identified, the Associated Press reported May 17. The Department of Health and 
Environmental Control (DHEC) said its scientists have not found any specific link 
between food served at the El Mexicano restaurant and the bacteria that has sickened 
10 people. The DHEC notified hospitals and doctors the week of May 7 that nearly a 
dozen people got sick from E coli after eating at a Mexican restaurant. The agency said 
it does not publicly identify a business until there is a specific link to the illnesses, but 
El Mexicano agreed to be named. The restaurant owner said it has cooperated with the 
DHEC and has never had a problem like this in 15 years in business. 

Source: http://www.heraldonline.com/2012/05/17/398Q325/dhec-releases-name-of- 
restaurant.html 



20. May 16, U.S. Environmental Protection Agency - (Massachusetts) Keene, NH-based 
wholesale grocer fined for chemical release in Hatfield, Mass. C&S Wholesale 
Grocers, Inc., a large food distribution business, has agreed to pay a penalty of 
$126,700 to settle claims it violated the Clean Air Act, the Environmental Protection 
Agency (EPA) reported May 16. The case stems from an investigation the EPA 
launched following the release of anhydrous ammonia from a C&S cold storage 
warehouse in Hatfield, Massachusetts, in 2007. Filed May 16, the complaint said C&S 
had an inadequate risk management plan that lacked clear procedures to aid emergency 
responders when they arrived at the scene, leading to a delay in shutting down the 
system. C&S agreed to hire a “refrigeration expert” to audit the facility’s ammonia 
refrigeration system, which contains 58,000 pounds of ammonia, and determine 
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whether it complies with all applicable generally accepted good engineering practices. 
C&S will give the results of the audit and assessment to EPA within 6 months, and 
C&S will make any recommended changes within a year. 

Source: 

http://vosemite.epa.gov/opa/admpress.nsf/d0cf6618525a9efb85257359003fb69d/b3dec 

8eb4185937e85257a0100530020!QpenDocument 

For another story, see item 5 
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Water Sector 



21. May 18, Lower Hudson Valley Journal-News - (New York) Yonkers warehouse fire 
sends paint into rivers. The Saw Mill River near Yonkers, New York, turned a milky 
white from soluble latex paint and paint products that ran into it as firefighters doused 
the Dunham Paint warehouse with water for hours to put out a blaze May 16 to May 
17. The discolored water discharged into the Hudson River and a large slick was 
flowing south toward New York City May 18. A spokeswoman for the State 
Department of Environmental Conservation (DEC) said the latex paint “is not as 
problematic” as oil-based for the environment. Nine of the 54 Yonkers firefighters 
battling the three-alarm fire were injured. The DEC was working with the warehouse 
owner on a plan to demolish the building, which burned to its foundation. The DEC 
was planning with Dunham Paint a cleanup for the plant and river. Absorbent booms 
were placed in the river to try to stop or slow the flow of paint products and large 
vacuums were used to suck up the paint around the plant. Trenches were also dug to 
contain the water runoff from the factory. 

Source: http://www.lohud.com/article/20120518/NEWS02/305180064/Yonkers- 
warehouse-fire-sends-paint-into-rivers 

22. May 17, Associated Press - (Hawaii) Kalapaki Bay in Lihue closed after sewage 
spill. Kauai County, Hawaii officials said they anticipate Kalapaki Beach would remain 
closed until at least May 18 due to a sewage spill May 16 at the Lihue Wastewater 
Treatment Plant. An estimated 400,000 to 500,000 gallons of partially treated sewage 
flowed from the plant, situated above Kauai Lagoons Golf Course, into the storm drain 
system that leads into Kalapaki Bay, officials said. Officials said the spill resulted from 
a partial power outage involving a circuit within the facility. The sewage that spilled 
had completed secondary treatment but not tertiary treatment. 

Source: http://www.staradvertiser.com/news/breaking/151927665.html 

23. May 16, Hartford Courant - (Connecticut) $4.5 million sewer project approved in 
Berlin. The town of Berlin, Connecticut, and two independent water utilities 
announced plans May 15 to spend $4.5 million to repair a major sewer line and seal 
leaks that officials say are costing money for sewage treatment. The town council 
approved repairs and work is expected to begin this fall. A liner will be installed in the 
1.6-mile long sewer interceptor to seal any cracks, and manholes along the sewer line 
will be replaced so storm water cannot leak in. Officials said repairs will prevent storm 
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water from getting into the line, a problem throughout the town’s sewer system that is 
estimated to cost about $600 per day. A town engineer said storm water getting into the 
sewers increases the amount of sewage being sent to the Mattabassett District for 
treatment. Reducing the flow to the district’s plant in Cromwell will lower costs for the 
town, he said. Officials said sewer customers will ultimately have to pay for the project 
in the form of an increase in their bills. 

Source: http://articles.courant.com/2012-05-16/community/hc-berlin-sewers-0517- 
20120516 1 sewer- line-sewer-system-excess-sewage-treatment-costs 

24. May 16, Associated Press - (Washington) Wash, advising 25 cities about dwindling 
water. Twenty-five communities in eastern Washington’s arid Columbia River basin 
could have their municipal wells go dry within a decade, according to a study of the 
underground aquifer that supplies their groundwater. State officials said the looming 
problem could affect areas stretching from Odessa to Pasco, a combined population of 
200,000 people. A project from 1942 intended to deliver water to 1 million acres from 
the reservoir behind the Grand Coulee dam was never fully completed. Many farmers 
received permission to dig wells to irrigate their crops from the Odessa aquifer, the 
same underground aquifer those cities and towns drill into for water, beginning a steady 
and precipitous decline. Some wells have gone dry, and the solution has generally been 
to just drill a deeper well, said the executive director of the Columbia Basin 
Groundwater Management Area. But a study by the group shows deeper water will not 
be usable in the future. Washington approved a drawdown of Lake Roosevelt, the 
reservoir behind the dam, to allow more farmers to irrigate with surface water in hopes 
that will stabilize the declining aquifer for remaining water users. Some farmers also 
have rotated their crops during the dry, summer months to use less water. In 201 1, the 
ecology department estimated that municipal demand will increase by 24 percent by the 
year 2030, while demand from agricultural irrigators will increase 10 percent. 
Conversely, supply is expected to increase 3 percent. Researchers attributed the 
increased demand to influences of climate change, population growth, and economic 
trends. In the meantime, the State ecology and health departments are working with 
cities and towns to better understand their municipal water systems and their water 
needs. 

Source: http://mvnorthwest.com/174/677968/Wash-advising-25-cities-about- 
dwindling-water 

25. May 16, Winston-Salem Journal - (North Carolina) Wastewater spills into Boonville 
creek. More than 10,000 gallons of wastewater spilled into a creek in Boonville, North 
Carolina, May 14 after a day of heavy rains. There were two spills, both of which 
drained into Tanyard Creek. About 7,500 gallons came from a manhole at Lon Avenue, 
and 3,000 gallons from a manhole on Sunset Drive. The town attributed both spills to 
an aging sewer system that allows water to infiltrate the system. 

Source: http://www2.ioumalnow.com/news/2012/may/16/wastewater-spills-into- 
boonville-creek-ar-2284157/ 



For another story, see item 39 
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Public Health and Healthcare Sector 



26. May 17, WDRB 41 Louisville - (Kentucky) University Hospital on heightened 
security following Louisville shootings. Police cars packed the emergency room 
entrance at University Hospital after multiple shootings in Louisville, Kentucky, left 
three people dead May 17. As ambulances began arriving to University Hospital with 
several other shooting victims, officers also began arriving to heighten security. 
Multiple people and employees entering and leaving the hospital said some doors were 
locked and security was standing at certain doors, checking people who entered and 
exited the facility. Hospital officials say, however, the hospital was not officially on 
lockdown, and there were ways to enter and leave the hospital. 

Source: http://www.wdrb.com/storv/18516391/universitv-hospital-on-heightened- 
security-following-louisville-shootings 

For another story, see item 2 
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Government Facilities Sector 



27. May 17, Associated Press - (Minnesota) Minn, man targeted Mexican consulate. A 
Minnesota man with suspected ties to white supremacist groups planned to attack the 
Mexican consulate in St. Paul, believing it would stir debate on immigration amnesty 
issues ahead of the 2012 Presidential election, according to a federal affidavit recently 
unsealed in federal court and obtained May 17 by the Associated Press. He was 
indicted in April on drug charges, though authorities had been watching him and 
another man since 2010 as part of a domestic terrorism probe. The affidavit said he had 
amassed weapons and wanted to attack minorities, people with left-leaning political 
beliefs, and government officials. “We consider him a threat, and we believe he had the 
capacity to carry these threats out,” an FBI spokesman said in an interview May 17. In 
the plot against the consulate, the suspect allegedly told an undercover agent he wanted 
to load a pickup truck with barrels of oil and gas, drive it into the consulate, allow the 
mixture to spill, then set it ablaze with a road flare. He also suggested placing hoax 
explosive devices along the May Day parade route in the Twin Cities, saying he had 
video of prior parades so he could identify parade participants. 

Source: 

http://www.google.com/hostednews/ap/article/ALeqM5gkvmdqt81Z6oQDfvNif0pc21 
Ni w?docld=10438384434541649560e247b00d8350 



28. May 17, Associated Press - (Arizona) Peoria boy in custody after flashlight-bomb 
hoax. A Peoria, Arizona boy is facing charges after causing a school lockdown May 16 
by telling classmates a flashlight was a possible bomb. The boy remained in juvenile 
custody May 17, and Peoria police said he could be charged for disrupting the school 
day and weapons misconduct. Police said the boy placed a flashlight in a park next to 
Cotton Boll Elementary School and would tell other students it was likely a flashlight 
bomb. In the wake of two recent incidents of flashlights with explosives found in 
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Glendale, students alerted the school principal. Investigators, including a bomb squad, 
found no evidence of a bomb. The investigation led authorities to the boy. Police said 
the boy found the flashlight and brought it as a prank. 

Source: http://ktar.eom/6/1542430/Peoria-bov-in-custody-after-flashlightbomb-hoax 
For another story, see item 12 
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Emergency Services Sector 



See item 38 
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Information Technology Sector 

29. May 18, Help Net Security - (International) Spam with malicious attachments 
rising. While the volume of spam messages is falling, the number of messages 
containing malicious attachments increased, meaning spam is growing more dangerous 
even as it becomes less prevalent, according to a Bitdefender study. The number of 
malicious attachments in January 2012 rose 4 percent from the same period in 201 1, 
even as the overall number of spam messages sent dropped by more than 16 percent in 
the first quarter of 2012 from the last quarter of 201 1, Bitdefender research shows. Of 
the 264.6 billion spam messages sent daily, 1.14 percent carry attachments — about 
300 million of which are malicious. After increasing in January, the growth of 
malicious attachments leveled-off amid an apparent pause in spam campaigns even 
though spam continued to fall overall. Attachments may come in the form of phishing 
forms that trick users into typing in credit card credentials for scammers to use 
whenever they want. Or, they may pack malware such as trojans, worms, and viruses 
that can eventually cause trouble for users. 

Source: http://www.net-securitv.org/malware news.php?id=21 13&utm 

30. May 18, H Security - (International) British hackers get jail terms. Two separate 
cases in the United Kingdom saw hackers receive jail terms of 12 and 18 months. In 
one case, a British man from West Sussex pleaded guilty to hacking into a U.S. 
citizen’s Facebook account and gaining access to that person’s e-mail account in 
January 2011. The Metropolitan Police Service’s Police Central e-Crime Unit was 
informed of the breach via the FBI and arrested the man in July 2011 under the 
Computer Misuse Act. In the other case, a hacker was found using a Call of Duty 
“patch,” which was in fact a trojan carrying a keylogger and other malware. The hacker 
is said to have acquired users’ credentials and sold them for $1 to $5 on an online 
market; the proceeds were transferred to a Costa Rica-based account. However, his 
online activities were not detected until after he was caught attempting to burgle 
Walmer Science College in Deal in March 2012. 

Source: http://www.h-online.com/security/news/item/British-hackers-get-iail-terms- 
1578569.html 
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31. May 18, Reuters - (National) ZTE confirms security hole in U.S. phone. ZTE, the 
world’s fourth-largest handset vendor and one of two Chinese companies under U.S. 
scrutiny over security concerns, said one of its mobile phone models sold in the United 
States contains a vulnerability researchers said could allow others to control the device. 
The hole affects ZTE’s Score model that runs on Google’s Android operating system. 
The hole, or backdoor, allows anyone with the hardwired password to access the 
affected phone, a researcher for cybersecurity firm CrowdStrike said. ZTE and Chinese 
telecommunications equipment manufacturer Huawei Technologies were stymied in 
their attempts to expand in the United States over concerns they are linked to the 
Chinese government, though both companies denied this. Most concerns centered on 
the fear of backdoors or other security vulnerabilities in telecommunications 
infrastructure equipment rather than in consumer devices. Reports of the ZTE 
vulnerability first surfaced the week of May 14 in an anonymous posting on a code- 
sharing Web site. Since then, others alleged different ZTE models, including the Skate, 
also contain the vulnerability. The password is readily available online. ZTE said it 
confirmed the vulnerability on the Score phone, but denied it affected other models. 
The CrowdStrike researcher said his team analyzed the vulnerability and found the 
backdoor was deliberate because it was being used as a way for ZTE to update the 
phone’s software. It is a question, he said, of whether the purpose was malicious or just 
sloppy programming. While security researchers highlighted security holes in Android 
and other mobile operating systems, it is rare to find a vulnerability apparently inserted 
by the hardware manufacturer. 

Source: http ://www .reuters . com/article/20 1 2/05/1 8/us-zte-phone- 
idUSBRE84H08 J20 120518 



32. May 18, Softpedia - (International) Spammers promote fake luxury goods on 
hijacked Joomla and WordPress sites. Security experts found many compromised 
WordPress and Joomla Web sites used by spammers to advertise sketchy diet pills and 
counterfeit luxury goods. The owners of these sites are most likely unaware of what is 
going on. Web masters often fail to check their sites’ subdirectories for signs of 
malicious files and Web pages, thus allowing cybercriminals to use the domain’s 
reputation to host their scams, Unmask Parasites reported. Attackers often brute-force 
administrator passwords to gain access to a site’s back end. Once the criminals gain 
access, they inject a Web shell into an existing plugin by utilizing the Theme Editor. 
The shell is leveraged to create a subfolder to which a WordPress installation package 
is uploaded. After obtaining the MySQL credentials from the wp-config.php or 
configuration.php files, depending on whether the site is Joomla or WordPress-based, 
the attacker is able to install their own theme and make a fully operational Web site. 
These sites represent “doorways” that point unsuspecting visitors to malicious domains. 
Experts discovered around 3,000 compromised Web sites that stored such doorway 
blogs. Reportedly, some of the blogs that advertise slimming and luxury goods were 
created in March 2012, but there were a few created 1 year ago. The hijacked sites also 
host phishing pages that try to trick users into disclosing online banking credentials and 
other sensitive data. 

Source: http://news.softpedia.com/news/Spammers-Promote-Fake-Luxury-Goods-on- 
Hijacked-Joomla-and-WordPress-Sites-270345.shtml 
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33. May 17, SecurityWeek - (International) NCC Group maps source of global hack 
attempts during Ql. Using data collected from DShield, the NCC Group mapped out 
its latest report on the origin of computer hacking attempts for the first quarter of 2012. 
NCC noted the top 10 changed significantly since its previous report 3 months ago. 
Italy, France, and India dropped off the top 10 list, while the Ukraine in fifth, South 
Korea in ninth, and the United Kingdom made the list. Russia showed a large increase, 
with more than 12 percent of global hacks originating from the country, putting it in 
third place, behind the United States and China. There was also a rise in hacks 
appearing to originate from the Netherlands, up from 3.1 percent to over 1 1 percent, 
moving it into fourth place in the hacking chart. 

Source: http://www.securitvweek.com/ncc-group-maps-source-global-hack-attempts- 
during-q 1 

For another story, see item 8 

Internet Alert Dashboard 



To report cyber infrastructure incidents or to request information, please contact US-CERT at sos@us-cert.gov or 
visit their Web site: http://www.us-cert.gov 

Information on IT information sharing and analysis can be found at the IT ISAC (Information Sharing and 
Analysis Center) Web site: https://www.it-isac.org 
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Communications Sector 



34. May 17, Space.com - (International) Monster sunspot’s solar flare strong enough to 
confuse satellites. An enormous sunspot unleashed a powerful solar flare May 16, 
triggering a radiation storm intense enough to interfere with some satellites orbiting 
Earth, space weather experts said. The flare erupted from monster sunspot complex AR 
1476, which stretches about 60,000 miles from end to end, at 9:47 p.m. The flare 
spawned a class S2 solar radiation storm around Earth, said the Space Weather 
Prediction Center (SWPC), a branch of the U.S. National Oceanic and Atmospheric 
Administration. A SWPC description classifies S2 solar radiation storms as moderate, 
with the potential to cause infrequent “single-event upsets” in Earth-orbiting satellites. 
People aboard aircraft flying at high latitudes may also be exposed to elevated radiation 
levels during such events. The flare also caused limited radio blackouts on the sunlit 
side of Earth, SWPC researchers said, adding that the storm appears to be subsiding. 
Scientists described the May 16 eruption as a class M5, or intermediate, solar flare. 
Source: http://www.space.com/15736-monster-sunspot-solar-flare-satellites.html 

For another story, see item 31 



T Return to top i 



- 15 - 



Commercial Facilities Sector 



35. May 18, Associated Press - (Indiana) Ind. apartment tower fire injures several 
people. A smoky fire forced residents from a 7- story apartment building for senior 
citizens and those with disabilities in Terre Haute, Indiana, May 17. Authorities said at 
least seven people were taken to hospitals for treatment of smoke inhalation or bums 
from the fire at Garfield Towers. The blaze started in the building’s sixth-floor lobby, 
according to a fire chief. He said the fire was quickly put out, but heavy black smoke 
came from windows on the sixth and seventh floors. About 240 people live in the Terre 
Haute Housing Authority facility. Many of the residents were taken to a temporary 
shelter at a high school. 

Source: http://www.whiotv.com/news/ap/indiana/ind-apartment-tower-fire-iniures- 
several-people/nN 8 g6/ 

36. May 17, Vancouver Columbian - (Washington) Gas leak closes 1-5 Ridgefield 
interchange, businesses. A gas leak caused during excavation work in Ridgefield, 
Washington, prompted road closures and business evacuations for more than 3 hours 
May 17 as crews scrambled to shut off gas to the line. The leak was reported after a 
construction worker accidentally struck the line. The Pioneer Street exit off of 
northbound Interstate 5 and Pioneer Street were closed to traffic until Northwest 
Natural technicians were able to pinch the gas line. One building of the Tri-Mountain 
Plaza was evacuated as a precaution, which included several businesses. Residents and 
guests at the Tri-Mountain RV Park nearby were not able to come and go until the road 
reopened, according to the park’s manager. She said more than 50 people live at the 
park. 

Source: http://www.columbian.com/news/2012/may/17/fire-crews-responding-gas- 
leak-ridgefield/ 

37. May 17, WTXF 29 Philadelphia - (Pennsylvania) Northeast Philly synagogue 
vandalized. A synagogue in Philadelphia was vandalized, WTXF 29 Philadelphia 
reported May 17. The front entrance of Ner Zedek was peppered with hundreds of shots 
from a BB gun that shattered windows. The synagogue’s members believe they were 
targeted because they were hit by vandals before. The previous attack was in 2009 
when the synagogue was vandalized with ant-Semitic graffiti. Police increased patrols 
in the area to prevent further vandalism. 

Source: http://www.myfoxphillv.com/dpp/news/local news/synagogue-in-ne-phila.- 
vandalized 



38. May 17, Berkshire Eagle - (Massachusetts) Over 100 involved in North Street 

melee. Dozens of police reinforcements, some from surrounding towns, streamed into 
downtown Pittsfield, Massachusetts, May 17 after a fistfight between 2 girls escalated 
into a melee involving well over 100 young people, according to police. Six arrests 
resulted from the “large disturbance” that broke out, according to a Pittsfield police 
captain. The captain said many police officers were assaulted during the disturbance, 
and that about 20 or 30 members of the crowd were “out of control” with the rest 
shooting video and yelling. The incident began as Third Thursday festivities were 
winding down and two bicycle officers tried to clear a group of people off the street so 
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it could be reopened to traffic. A fistfight then broke out between two girls in the 
group, and when the two officers went to break up the fight, many others joined in. The 
2 officers called for assistance, and all 20 police officers on duty at the time responded. 
Assistance was also provided by the Massachusetts State Police, the Berkshire County 
Sheriffs Office, and the Dalton and Lanesborough police departments. 

Source: http://www.berkshireeagle.com/ci 2065062 1/over- 100-involved-north-street- 
melee?nstrack=sid:867896lmet:300lcat:0lorder:l 



For another story, see item 22 
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National Monuments and Icons Sector 



39. May 18, Associated Press; CBS News - (Colorado) Colo. Hewett wildfire grows to 
7,300 acres. More firefighters are heading to a fire that has burned across more than 1 1 
square miles in northern Colorado and is approaching a reservoir for the city of 
Greeley. A U.S. Forest Service official said the blaze about 20 miles northwest of Fort 
Collins had scorched 1.5 square miles of land but rapidly expanded May 17 fueled by 
erratic winds. As of late May 17, the Hewlett Fire had burned 7,300 acres, according to 
KCNC 4 Denver. Authorities ordered evacuations of about 80 homes near Poudre 
Canyon May 17. Residents of about 65 of those homes were allowed to return by early 
evening, with instructions to be ready to leave again if conditions change. Some 400 
firefighters were on the scene. Fire officials said more firefighters would be arriving 
May 18. 

Source: http://www.cbsnews.com/8301-201 162-57437 141/colo-hewett-wildfire- 
grows-to-7300-acres/ 

40. May 18, RARE 11 Minneapolis; Associated Press - (Minnesota) Crews contain forest 
fire just outside Ely. Authorities in Ely, Minnesota, have lifted an evacuation order 
and said they have gained the upper hand against a wildfire that threatened the town, 
KARE 11 Minneapolis and the Associated Press reported May 18. An emergency 
services manager for the St. Louis County Sheriff’s Department said crews have 
switched to mopping up, though it will likely take a day or longer to douse all the hot 
spots. The emergency services manager said fire officials believe the fire started when 
a tree fell and snapped a power line, and it spread quickly due to high winds. It burned 
up to 150 acres before firefighters stopped its advance on the town. City officials asked 
people in a few square blocks in the southeast part of town to evacuate. Ely officials 
said no structures in the city were damaged, but a storage building south of Ely was 
destroyed. 

Source: http://www.karell.com/news/article/976523/168/Crews-battle-forest-fire-iust- 
outside-Ely-evacuations-ordered 

41. May 17, Arizona Public Media - (Arizona) 4 AZ wildfires surpass 22,000 acres. Four 
fast-moving wildfires have consumed more than 22,000 acres in Arizona’ s rugged 
central and eastern mountain ranges. More than 1,200 firefighters, supported by 
aircraft, were working to contain the flames May 17. Extremely dry and hot conditions 
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and the threat of more fires led the Arizona Forestry Division May 16 to expand fire 
restrictions on State lands to all 15 counties. Earlier in May, the State imposed 
restrictions in six southeastern counties. The historic town of Crown King remained 
evacuated as a fire burning all week filled the region with smoke and ash. The 
Gladiator Fire was reported at 6,400 acres and growing, with firefighters worried about 
the effects of expected 40 mph winds May 17. The Gladiator Fire had destroyed three 
homes, and firefighters were working to protect other structures. Crown King residents 
were housed at Bradshaw Mountain High School East Campus in Prescott Valley in a 
shelter run by the Red Cross. The biggest fire, burning 21 miles south of Payson, more 
than doubled in size May 15-16, and was estimated at 12,500 acres May 17. The 
Sunflower Fire was moving through very dry grasses, pinon pine, and cypress trees. A 
report from the federal Incident Information System Web site said the Sunflower Fire 
was 10 percent contained. A third fire burned 1,900 acres on the Fort Apache Indian 
Reservation and was predicted to go to 5,000 acres before being controlled. It was 45 
percent contained. The Elwood Fire burning on the San Carlos Indian Reservation 
consumed more than 1,500 acres and was 5 percent contained. In southern Arizona, 
Coronado National Forest implemented fire restrictions because of increased danger, as 
did Coconino National Forest May 16. 

Source: http://www.azpm.org/news/story/2012/5/17/844-4-az-wildfires-consume- 
2 1000-acres/ 
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Dams Sector 



42. May 18, Nashoba Publishing - (Massachusetts) Alarm over evidence of dam 

tampering. The Ayer, Massachusetts, Conservation Commission was alarmed to find 
evidence of human tampering with a critical upstream beaver dam within the Pine 
Meadow conservation land, Nashoba Publishing reported May 18. “Someone is 
tampering with the upper beaver dam under the power lines,” said a commission 
member. “It looks like branches have been pulled from the base of the dam, so water is 
flowing through.” The commission asked the Ayer Public Spirit to warn the public 
there is a $25,000 fine for tampering with a beaver dam. On July 11, 2011, a violent 
dam burst sent 19 million gallons of water rushing downstream. The force of the torrent 
washed away the underpinnings of Oakridge Drive and tons of sediment and roadway 
material washed into the 85-acre Flannagan Pond. A department of fisheries and 
wildlife Highway assistant foreman said May 14 he saw “a new trail going down right 
to the dam made by someone using a four-wheeler” that was not there last time he 
checked in March. 

Source: http://www.nashobapublishing.com/ayer news/ci 20653484/alarm-over- 
evidence-dam-tampering 
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